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Email is an effective way of implementing an e-mentoring program 
for health care workers because of the flexibility of asynchronous 
communication.^ When the content of an email is sensitive or 
identifies a patient it is considered best-practice to encrypt the ennail 
to nnaintain patient confidentiality. 


E mails are most often sent across a public network — the 
Internet— in plain text. Further, emails sent or received 
using an employer's email system can be both legally and 
technically read by the employer. 


Table 1: The security scale, description and example used to classify emails 
in our study. 


Box 1: The security risk of email 


Score 

Description 

1 

Email contains patient identifiable content where the confidentiality of the 
patient is breached by identifying medical condition or treatment. 

2 

Email contains patient identifiable information but does not disclose 
medical condition or treatment 

3 

Email identifies staff member involved in a practice that places them or 
other staff member at professional risk. 

4 

Email identifies staff member and divulges possible stigmatising 
information about themselves or other staff member. 

5 

Email identifies staff member and divulges information that could 
embarrass themselves or other staff member. 

6 

Email identifies staff member and describes a clinical event or 
professional event. 

7 

Email identifies staff member and divulges personal information about 
themselves or other staff member. 

8 

None of the above 


The ainn of this study was to deternnine the level of security and 
privacy needed by an ennail systenn used in e-nnentoring. 
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We ran a 12- nnonth multi-centre, nnulti-disciplinary e-nnentoring pilot 
study for clinicians involved in the delivery of residential home care 
nursing, midwifery and allied health therapies. During the pilota total 
of 108 emails were sent. 

Forthe study, we used a secure, web-based email application as the 
means of communication between mentor and mentee. The 
application forces all correspondence to be encrypted using 


Secure Socket Layer and Transport Layer Security are 
standardised methods of Public Key Infrastructure (PKI): 
a form of cryptography that prevents the unauthorised 
reading of email's content. 


The mean security classification score was 6.30. (n=108, SD = 
1.09). The range of security classification scores was 3-8 and 
the interquartile range (IQR) was 6- 7. There were no emails for 
either security classification scores 1 or 2 — meaning no patient 
identifiable data was divulged in any correspondence during the 
study period. (Figure 1) 
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Figure 1: Histogram of security scores for the pilot study 


Box 2: Standard methods of Public Key Infrastructure 


We devised an eight-point security scale to rate the security and 
privacy sensitivity of emails between a mentor and mentee. (Table 1) 
We analysed the content of actual emails for the pilot project and 
assigned a security classification score to each of the emails. 
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The study shows that disclosure of patient 
identifiable data is not integral to 
e-mentoring. Hence, email systems used for 
e-mentoring do not need to comply with 
encryption techniques to meet legal requirements. We also showed 
that staff involved in an e-mentoring relationship will divulge 
sensitive or stigmatising information about themselves, colleagues 
or employer. Hence, the use of employer's email system is not 
recommended for e-mentoring -jssr^^crutiny of content may stifle 
correspondence on sensitive issues — possibly reducing the 
effectiveness of mentoring. 



